mirror of
https://github.com/siderolabs/talos.git
synced 2025-09-11 17:01:20 +02:00
d225cf91e8
Tmpfs uses shared mamory. The owner of it is system cgroup. It can be broke the system, put the big file on it. * set mount options to /tmp, /run folder as many OS have. * limit /tmp size to 64Mb. Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev> Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
34 lines
1.7 KiB
Go
34 lines
1.7 KiB
Go
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package mount
|
|
|
|
import (
|
|
"golang.org/x/sys/unix"
|
|
)
|
|
|
|
// PseudoMountPoints returns the mountpoints required to boot the system.
|
|
func PseudoMountPoints() (mountpoints *Points, err error) {
|
|
pseudo := NewMountPoints()
|
|
pseudo.Set("dev", NewMountPoint("devtmpfs", "/dev", "devtmpfs", unix.MS_NOSUID, "mode=0755"))
|
|
pseudo.Set("proc", NewMountPoint("proc", "/proc", "proc", unix.MS_NOSUID|unix.MS_NOEXEC|unix.MS_NODEV, ""))
|
|
pseudo.Set("sys", NewMountPoint("sysfs", "/sys", "sysfs", 0, ""))
|
|
pseudo.Set("run", NewMountPoint("tmpfs", "/run", "tmpfs", unix.MS_NOSUID|unix.MS_NOEXEC|unix.MS_RELATIME, "mode=755"))
|
|
pseudo.Set("system", NewMountPoint("tmpfs", "/system", "tmpfs", 0, "mode=755"))
|
|
pseudo.Set("tmp", NewMountPoint("tmpfs", "/tmp", "tmpfs", unix.MS_NOSUID|unix.MS_NOEXEC|unix.MS_NODEV, "size=64M,mode=755"))
|
|
|
|
return pseudo, nil
|
|
}
|
|
|
|
// PseudoSubMountPoints returns the mountpoints required to boot the system.
|
|
func PseudoSubMountPoints() (mountpoints *Points, err error) {
|
|
pseudo := NewMountPoints()
|
|
pseudo.Set("devshm", NewMountPoint("tmpfs", "/dev/shm", "tmpfs", unix.MS_NOSUID|unix.MS_NOEXEC|unix.MS_NODEV|unix.MS_RELATIME, ""))
|
|
pseudo.Set("devpts", NewMountPoint("devpts", "/dev/pts", "devpts", unix.MS_NOSUID|unix.MS_NOEXEC, "ptmxmode=000,mode=620,gid=5"))
|
|
pseudo.Set("hugetlb", NewMountPoint("hugetlbfs", "/dev/hugepages", "hugetlbfs", 0, ""))
|
|
pseudo.Set("securityfs", NewMountPoint("securityfs", "/sys/kernel/security", "securityfs", unix.MS_NOSUID|unix.MS_NOEXEC|unix.MS_NODEV|unix.MS_RELATIME, ""))
|
|
|
|
return pseudo, nil
|
|
}
|